Hi and welcome to section three net CAT penetration test.
In this video we are going to talk about penetration test and take a look in
how it's possible to use net CAT for scanning.
Penetration testing is more than running scanners and automated tools
and then written a report before talking about the use of netcat.
For penetration testing, we have to talk about the face of a penetration test.
It's very important to guide the process when this standard.
Here we are presenting this process based on the P test penetration testing as a
cushion standard available in this U R L. The P test.
Define a penetration test as a cushion in seven main sessions.
Threat engagement interactions, intelligence gathering,
threat modeling, vulnerability analysis, exploitation,
pause exploitation and reporting threat engagement interactions.
Discuss the scope and terms of pen test.
Financial goals of the engagement intelligence gathering.
It's about gathering any information about the organization you are attacking.
So like social media networks, Google hacking, footprinting,
the target.
It's more to learn about the target and the types of security controls
in place. For example, how it operates, how it behaves,
how it can be attacked. Threat modeling, it's used.
The information you add query in the intelligence gathering phase to identify
any existing vulnerability on a target system.
It will the term that mean the most effective attack method,
the type of information you are after and how the organization
might be attacked. Threat modern involves looking at uh, uh,
organization as an adversary in attempting to exploit
weakness as the attacker would. Vulnerability analysis.
Having identified the most viable attack method,
you need to consider how you'll access the target.
It's must combine the info,
learning to understand what attacks might be viable.
Example port or vulnerability scans data gather by
boundary grabbing or information collected during intelligence gathering.
Exploitation. Exploitation is often done in brutal force.
Whether then in precision exploit,
who should be performing only when you know almost beyond a shadow of
doubt that a particular exploit be ful. Force.
Exploitation begins after you have compromised one or more.
Systems provide vulnerable information and intelligence
from your penetration. IT targets specific system. For example,
identify critical infrastructure and targets information or data that
the company values most. And that is what attempt to secure.
It's one of the tricky scenarios in which you must take the time to learn
what information is available to you and then use that information to your
benefit. Think like a malicious attacker, be creative,
adapt quickly and rely on your width instead of
automated tools. And finally, reporting.
Reporting is by for the most important element of penetration test 'cause you
have to communicate all the information. You have to communicate what you did,
how you did it, how the organization should fix the vulnerabilities.
Discovered in pain test you are working for attackers point of view,
net CAT is not uh, an exploitation tool, but it can help in this process.
Net CAT is a robust T C P I P and U D P utility tool and is able to handle
a variety of system and network related functions.
Net CAT is not the best tool for port scanning available,
but it's able to handle this task by default.
It used the T C P protocol for all options including port scanning,
port scanning and service certification.
Play a large role during a penetration test.
Identifying a service or a server version running on a system is a very
important to determine any potential vulnerability information.
Here we have some port scan options for net CAT
dash V is about ity these results in the level of verbosity
and the results of net CAT will show what's going on for each step that the tool
is taken when the executing are inner common or when it receive
external common dash r.
This option randomized ports in several mode dash R.
We also randomize randomize local store ports. Dash U,
it's U D P mode. Since U D P is a connector protocol,
it's recommended that it's used timeouts we this option and
dash Z zero io,
no data will be passed to this receiver essentially for D C P.
This is a three-way handshake.
Now let's take a look in the practice here. I'm running my Linux,
tele Linux environment and here I have one machine running,
uh, windows. So in this environment here,
let open a connection using,
I'm using a netcat version for for windows.
So dash V to get a OSE mode,
K to remaining, uh, open door.
Lesson L for lesson and P for the port.
So I would choose 5, 5, 5, 5.
And okay net cat for the version seven on
for the project and map. We'll listen,
we'll open a connection and listen in this port here.
So let me put here
in here in my UX environment.
Let's do a scanning for this port. Okay.
First I'll open a terminal here,
put it this way,
me another terminal in this side by side.
First I would take, uh, a scan for the,
for the port that I open in another terminal windows terminal. Okay,
so I'll use the net CAT version stolen in the this project.
I'll use dash DV to get more detail about the
the ports.
I'll use the option W to determine all
the ports.
I will wait this number two here is to wait the number of seconds for each port
I you put the IP of my machine that is running Windows
15 seven.
I put dash Z dash C is will, uh,
make a connect, will do a scan,
but will not connect for for the port. Okay.
And I'll put a range of ports.
So 5 5 5 0 dash
5 5 6 I'll put, would put,
I would determine a range for, for ports.
If I stipulate big range, I would take more time.
Okay, so I know that the,
there's a port in 5 5, 5 5 and I put a range of 10,
uh, ports only to get more speed, minimize scanning process.
So the net get will start to make a scanning the ports for each port.
We try to only verify it's used cp. Okay,
it's only verified it's a, a connection. No.
So this is the ip,
this is the port and the net CAT was able to
verify that there's a port open in 5 5, 5 5. Okay,
so, uh, the net cat, uh, is not connected in this port.
It's only check. Hey, this is, uh, there's a port open there. Okay,
another uh, test that we are gonna do here is uh,
I will start my Apache server in this Linux environment
and I will do a scan. I will verify if the port is open or not,
but first of all, I will start my service AP Apache.
So the server is, is running. Okay, so I,
I able to verify, verify if the,
get a status for the services. So the service is active.
So my H A T P server, AP Apache is running.
And in this side here I will take a look if this open is,
is the port is open or not.
So I will do a netcat dash V V O V.
Okay. Uh,
local host and I will specify this port
I for the, for the scanning I can use,
I use the dash Z, but I will verify,
I specify a specific port or I can specify a range
of ports. Okay? And now, uh, I know that
this port here is open okay?
And not can use my,
the information present in the services file.
And uh, I know that the port is,
it's open now let me close stop the service
like this. Okay?
The May a TTP server is stop it and I'll repeat the proceeding.
And now the connection is refused that in this part is closed.
Okay, so uh, net cat, this is the use of net CAT for scanning.
Uh, it's very simple type of scanning,
but it's very useful to determine if a
specific port or a range of ports.
In this video we saw an introduction about the phases of
penetration test defined by B test and how we can use
Netcat for scanning the next video.
We'll take a look in how use Netcat for Nuon. Hope to see you there.